CVE-2023-31188

8HIGH

Key Information

Vendor: Tp-link
Status: Archer C50; Archer C55; Archer C20
Vendor: CVE Published:; 6 September 2023

Summary

Multiple TP-LINK products allow a network-adjacent authenticated attacker to execute arbitrary OS commands. Affected products/versions are as follows: Archer C50 firmware versions prior to 'Archer C50(JP)_V3_230505', Archer C55 firmware versions prior to 'Archer C55(JP)_V1_230506', and Archer C20 firmware versions prior to 'Archer C20(JP)_V1_230616'.

Affected Version(s)

Archer C50 = firmware versions prior to 'Archer C50(JP)_V3_230505'

Archer C55 = firmware versions prior to 'Archer C55(JP)_V1_230506'

Archer C20 = firmware versions prior to 'Archer C20(JP)_V1_230616'

CVSS V3.1

Score:

Severity:

HIGH

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Adjacent Network

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

None

Scope:

Unchanged

Timeline

Vulnerability published.
Sep 6, 2023
Vulnerability Reserved.
Aug 15, 2023

Collectors

NVD DatabaseMitre Database